This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
File:                     djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json)
Hash identifier:          h2NEPghKhDt3qZippzleW5yJ7B57RF11aAMJZsD45Rw=
Subject key identifier:   43:AD:D2:D5:39:EE:6A:8E:FC:4D:B6:95:4E:B3:49:4A:6A:53:D9:EC
Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3
Certificate issuer:       /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
Manifest number:          0101
Signing time:             Sun 25 Jan 2026 04:21:17 +0000
Manifest this update:     Sun 25 Jan 2026 04:21:16 +0000
Manifest next update:     Sun 01 Feb 2026 04:21:16 +0000
Files and hashes:         1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: 66iSY2EARosVlIjXbsDH2CPYcZSEsB7cgddLCbFBR2o=)
                          2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl
                          rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3
        Validity
            Not Before: Jan 25 04:21:16 2026 GMT
            Not After : Feb  1 04:21:16 2026 GMT
        Subject: CN=69759a3d-d2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:07:4b:bb:87:d0:48:22:3d:6a:de:01:4e:61:
                    30:a3:2f:64:b7:15:32:d5:eb:5d:d7:82:a2:4c:78:
                    90:ba:45:5e:2f:7f:9e:c6:a0:e5:99:c4:8a:23:22:
                    d1:88:9d:e7:68:fd:4b:6b:4d:2e:49:88:5d:11:7a:
                    4a:d9:76:38:ff:bd:0d:e8:b7:7a:ad:22:61:4b:3b:
                    9e:92:3a:6e:f9:1b:41:ae:9d:f8:bb:60:4d:86:73:
                    3c:b4:c8:4c:e9:11:64:2b:a1:3f:b3:44:eb:f2:76:
                    ae:d6:42:08:df:70:0b:3d:62:16:f4:71:47:8e:01:
                    ff:37:73:39:d9:75:9e:e3:27:43:e0:16:c6:10:4d:
                    23:ab:f1:57:1c:78:ab:af:47:12:3b:82:bf:0d:d7:
                    71:91:68:b0:4b:07:2f:32:14:0b:3a:b8:0f:c8:e6:
                    22:9d:82:a7:56:91:31:c8:e1:da:4d:da:cf:5d:2c:
                    79:d8:fc:19:55:08:2f:5c:1b:9f:c6:d7:a1:0f:c4:
                    6e:77:09:c7:53:24:b7:72:c0:04:7a:cd:58:70:71:
                    b0:a7:f6:27:09:cd:b3:9e:76:6d:70:64:f6:c1:1d:
                    b8:fc:7e:f5:bd:4a:f4:aa:6d:22:b3:72:59:c9:23:
                    7e:23:41:8b:90:f6:89:db:ae:d0:fb:59:44:fe:7a:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AD:D2:D5:39:EE:6A:8E:FC:4D:B6:95:4E:B3:49:4A:6A:53:D9:EC
            X509v3 Authority Key Identifier:
                keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:af:0d:53:f1:b1:a7:9a:60:d2:a3:04:ca:31:a6:58:dc:
         f8:d8:20:e8:a8:b5:9c:53:d1:e1:89:31:2c:82:08:69:77:e0:
         c6:8f:a6:b8:cf:ee:84:d0:86:35:d8:e7:42:9a:3d:2c:41:5a:
         33:0e:aa:79:02:08:a7:12:3c:50:18:8b:24:73:e1:77:92:02:
         29:5b:3f:aa:4a:f2:7e:6b:1f:53:95:13:4e:e6:10:5f:fc:f6:
         d3:e5:28:13:ed:c6:50:c1:26:15:34:61:d8:75:d6:6c:c7:df:
         05:b9:c6:43:51:87:17:b9:0d:73:d9:82:58:5b:63:ee:62:fd:
         67:e8:29:ce:5d:be:e0:4d:04:16:96:52:02:29:dc:b6:05:26:
         44:1d:8f:6a:2b:48:62:05:5b:37:b3:9a:c1:50:5a:5b:ee:97:
         9e:48:2a:e0:1b:a8:90:28:26:c8:98:d9:9c:46:c8:0e:cf:a0:
         e9:92:34:2e:78:b7:76:9a:97:80:c3:12:85:ac:22:22:83:17:
         45:fb:a9:95:59:74:49:68:c4:ac:b0:e6:40:82:02:98:66:1b:
         4b:31:40:b6:82:67:bd:40:9f:e4:44:19:a6:6c:b5:32:ca:28:
         91:fb:14:99:e0:fa:3a:af:9e:00:8c:f7:f1:9e:67:3e:05:02:
         0a:38:ff:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz
REZGNDU2QzMwHhcNMjYwMTI1MDQyMTE2WhcNMjYwMjAxMDQyMTE2WjAYMRYwFAYD
VQQDDA02OTc1OWEzZC1kMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7AdLu4fQSCI9at4BTmEwoy9ktxUy1etd14KiTHiQukVeL3+exqDlmcSKIyLR
iJ3naP1La00uSYhdEXpK2XY4/70N6Ld6rSJhSzuekjpu+RtBrp34u2BNhnM8tMhM
6RFkK6E/s0Tr8nau1kII33ALPWIW9HFHjgH/N3M52XWe4ydD4BbGEE0jq/FXHHir
r0cSO4K/DddxkWiwSwcvMhQLOrgPyOYinYKnVpExyOHaTdrPXSx52PwZVQgvXBuf
xtehD8RudwnHUyS3csAEes1YcHGwp/YnCc2znnZtcGT2wR24/H71vUr0qm0is3JZ
ySN+I0GLkPaJ267Q+1lE/nq8zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOt0tU5
7mqO/E22lU6zSUpqU9nsMB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw
OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW
c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds
UmtXenN0LXk0S0E5XzBWc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1ja8NU/Gxp5pg0qMEyjGmWNz42CDoqLWcU9HhiTEsgghpd+DGj6a4
z+6E0IY12OdCmj0sQVozDqp5AginEjxQGIskc+F3kgIpWz+qSvJ+ax9TlRNO5hBf
/PbT5SgT7cZQwSYVNGHYddZsx98FucZDUYcXuQ1z2YJYW2PuYv1n6CnOXb7gTQQW
llICKdy2BSZEHY9qK0hiBVs3s5rBUFpb7peeSCrgG6iQKCbImNmcRsgOz6DpkjQu
eLd2mpeAwxKFrCIigxdF+6mVWXRJaMSssOZAggKYZhtLMUC2gme9QJ/kRBmmbLUy
yiiR+xSZ4Po6r54AjPfxnmc+BQIKOP+K
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:07 2026 by rpki-client